CVE-2015-4624

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.

• CWE-284

• http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/536184/100/500/threaded
• https://www.exploit-db.com/exploits/40609/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/536184/100/500/threaded
• https://www.exploit-db.com/exploits/40609/Exploit, Third Party Advisory, VDB Entry

Published

Mar 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4614Multiple SQL injection vulnerabilities in includes/Function.…
• CVE-2015-4615Vulnerability in Easy2map-photos WordPress Plugin v1.09 allo…
• CVE-2015-4616Directory traversal vulnerability in includes/MapPinImageSav…
• CVE-2015-4617Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapP…
• CVE-2015-4619Cross-site request forgery (CSRF) vulnerability in Spina bef…
• CVE-2015-4620name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7…
• CVE-2015-4625Integer overflow in the authentication_agent_new_cookie func…
• CVE-2015-4626B.A.S C2Box before 4.0.0 (r19171) relies on client-side vali…
• CVE-2015-4627SQL injection vulnerability in Pragyan CMS 3.0.
• CVE-2015-4628SQL injection vulnerability in application/controllers/admin…
• CVE-2015-4629Huawei E5756S before V200R002B146D23SP00C00 allows remote at…
• CVE-2015-4630Multiple cross-site request forgery (CSRF) vulnerabilities i…